relay-compute-relay[.]com
“Wallet Connect”
Resumen de las pruebas
The domain relay-compute-relay.com was registered on 21 February 2026 through NiceNIC International Group Co., Limited and is currently taken offline. DNS resolution points to the IP address 104.21.24.199, which belongs to Cloudflare’s AS13335 and is geolocated in the United States. The authoritative nameservers are quincy.ns.cloudflare.com and zainab.ns.cloudflare.com, indicating the site leveraged Cloudflare’s CDN and edge services. An SSL certificate issued by Google Trust Services under the WE1 branch secures the site, confirming a valid TLS handshake but offering no guarantee of legitimacy. HTTP traffic was observed over HTTP/3, consistent with modern Cloudflare deployments.
Security scanners have flagged the domain: VirusTotal recorded detections from 11 of 95 vendors, and the site appears on two public blocklists. It has been actively blocked by PhishDestroy and ScamSniffer, reinforcing the view that the infrastructure is being used for a generic phishing campaign. The page title returned by the server is "Wallet Connect," suggesting an attempt to impersonate a cryptocurrency wallet connection service, though no further content analysis is available.
Defenders should consider the following mitigations: add the domain and its resolving IP to network deny lists, enforce DNS filtering for known malicious hosts, and monitor for any resurgence of the domain or similar sub‑domains under the same registrar. Given the Cloudflare hosting, any future re‑hosting on the same IP range may inherit the same risk profile; therefore, policies that block or scrutinize traffic from AS13335 for suspicious wallet‑related activity are advisable. Continuous re‑scanning of the domain via multi‑vendor services is recommended to capture any changes in detection scores. Organizations that rely on Wallet Connect integrations should verify the authenticity of any connection endpoints against official lists and educate users about unsolicited wallet‑connection prompts.
Data Coverage
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | relay-compute-relay.com |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 12/08/2026
9 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.